Skip to content

Comment on Ask HN: Company wants to isolate corporate network from the Internetparent

Comments

Most of the time when I've had to work on an air-gapped network, I was also provided with a second computer connected to the Internet. I found that to be a good compromise, though getting small code snippets or scripts onto the air-gapped network was a pain since I had to type the whole thing or bug IT to transfer it.

I say most of the time, since I once had to work in a very high-security environment with no Internet-connected computers in the area. I had to leave the secure area to look up things on my phone. It was a nightmare.

This is the ideal design, along with an office whose job it is to manually move data from the public side to the private side. These offices usually have a server on the public and private side to make it seem like it's an automated transfer (like putting a file in Dropbox on the public and then seeing it show up on the private side), but in reality you have a security guard making sure nobody's copying up `MSOfficeOfficialThisTime.msi`.

Couldn't you print the snippet as a QRCode and then scan it on the air gapped system?

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.